Merge pull request #13 from 7SOATSquad30/fix/setup-dynamo-client-with…

…-session-token

fix: setup dynamo client with session token

src/main/java/br/com/fiap/grupo30/fastfood/payments_api/infrastructure/config/DynamoDbConfig.java

@@ -1,16 +1,50 @@
 package br.com.fiap.grupo30.fastfood.payments_api.infrastructure.config;
 
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.beans.factory.annotation.Value;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
+import software.amazon.awssdk.auth.credentials.AwsBasicCredentials;
+import software.amazon.awssdk.auth.credentials.AwsSessionCredentials;
+import software.amazon.awssdk.auth.credentials.StaticCredentialsProvider;
 import software.amazon.awssdk.enhanced.dynamodb.DynamoDbEnhancedClient;
 import software.amazon.awssdk.enhanced.dynamodb.extensions.AutoGeneratedTimestampRecordExtension;
+import software.amazon.awssdk.regions.Region;
 import software.amazon.awssdk.services.dynamodb.DynamoDbClient;
 
 @Configuration
 public class DynamoDbConfig {
 
+    @Value("${spring.cloud.aws.credentials.access-key}")
+    private String accessKeyId;
+
+    @Value("${spring.cloud.aws.credentials.secret-key}")
+    private String secretAccessKey;
+
+    @Value("${spring.cloud.aws.credentials.session-token:#{null}}")
+    private String sessionToken;
+
+    @Value("${spring.cloud.aws.region.static}")
+    private String region;
+
+    @Bean
+    public DynamoDbClient dynamoDbClient() {
+        StaticCredentialsProvider credentialsProvider =
+                sessionToken != null
+                        ? StaticCredentialsProvider.create(
+                                AwsSessionCredentials.create(
+                                        accessKeyId, secretAccessKey, sessionToken))
+                        : StaticCredentialsProvider.create(
+                                AwsBasicCredentials.create(accessKeyId, secretAccessKey));
+
+        return DynamoDbClient.builder()
+                .credentialsProvider(credentialsProvider)
+                .region(Region.of(region))
+                .build();
+    }
+
     @Bean
-    public static DynamoDbEnhancedClient dynamoDbEnhancedClient(DynamoDbClient dynamoDbClient) {
+    public DynamoDbEnhancedClient dynamoDbEnhancedClient(@Autowired DynamoDbClient dynamoDbClient) {
         return DynamoDbEnhancedClient.builder()
                 .dynamoDbClient(dynamoDbClient)
                 .extensions(AutoGeneratedTimestampRecordExtension.builder().build())

src/main/resources/application-prod.properties

@@ -1,6 +1,7 @@
 # aws
 spring.cloud.aws.credentials.access-key=${AWS_ACCESS_KEY_ID}
 spring.cloud.aws.credentials.secret-key=${AWS_SECRET_ACCESS_KEY}
+spring.cloud.aws.credentials.session-token=${AWS_SESSION_TOKEN}
 
 # app
 integrations.mercadopago.base-url=https://api.mercadopago.com